Push McAfee to fix their product so that forced USB fix does not need to be applied. In general it should not be needed at all.
SafeBoot 4.2 worked without those problems.
It is a poor practise to pass responsibilty for configuration tweaks to user community. Product should handle those different conditions internally, without human intervention.
I guess they are slowly getting there (just too slow, in my opinion).
Yeah, some laptops need the box checked and others don't. They can always use the laptop keyboard. I think all 8 of my users called asking what to do. I laughed and said open the lid and use the laptop keyboard.
When resetting all to group config from the group level... there are two exclude options.
Exclude File Groups
There needs to be another one for Exclude Windows Options and that will take care of your problem
There are no such options though. You could create a seperate machine group for ALL laptops that need this setting and then you would be in good shape.
Maybe NITC could do that.